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Abstract 

Inspired by Hintikka’s treatment of question embedding verbs in [8] 
and the variations of noncontingency operator, we propose a logic with 
strong noncontingency operator ▲ as the only primitive modality. A pro¬ 
position is strongly noncontingent, if no matter whether it is true or false, 
it does it necessarily; otherwise, it is weakly contingent. This logic is not 
a normal modal logic, since tp) ^ {kip —>■ kip) is invalid. We 

compare the relative expressivity of this logic and other logics, such as 
standard modal logic, ironcontingency logic, and logic of essence and ac¬ 
cident, and investigate its frame definability. Apart from these results, 
we also propose a suitable notion of bisimulation for the logic of strong 
noncontingency, based on which we characterize this logic within modal 
logic and within first-order logic. We also axiomatize the logic of strong 
noncontingency over various frame classes. Our work is also related to the 
treatment of agreement operator in [10]. 

Keywords: noncontingency, completeness, expressivity, frame definability, bisim¬ 
ulation, modal logic of agreement 

1 Introduction 

In his seminal work [7], beyond ‘knowing that’, Hintikka also talked about other 
types of knowledge, such as ‘knowing whether’, ‘knowing who’. There, ‘John 
knows whether it is raining’ is interpreted as ‘John knows that it is raining or 
knows that it is not raining’, and ‘John knows who killed Toto’ is interpreted 
as ‘there is a person b, John knows that b killed Toto’ (ibid., pages 12, 132). 
However, Hintikka [8] gave a treatment of question embedding verbs. According 
to his interpretation, the sentence “John knows whether it is raining” should 
be equivalent to the sentence “If it is raining, then John knows that it is rain¬ 
ing, and if it is not raining, then John knows that it is not raining”, and the 
sentence “John knows who killed Toto” should be equivalent to the sentence 
“Any person is such that if he killed Toto then John knows that he killed Toto”. 
These interpretations of ‘knowing whether’ and ‘knowing who’ are different from 
the ones mentioned above. His treatment also applies to many other question 
embedding verbs like remember. This formal analysis is criticized in [11], but 
recently adopted by researchers, see e.g., [16]. One motivation of this paper is 
to formalize Hintikka’s analysis for question embedding verbs in [8]. 


1 


Another motivation is relevant to the variations of noncontingency operator. 
In a non-epistemic setting, ‘knowing whether’ in the sense of [7] can be read 
as noncontingency. A proposition is noncontingent, if it is necessarily true or 
necessarily false. Noncontingency operator has been studied since the 1960s, see 
[14, 2, 9, 12, 17, 5, 6, 4]. Asa variation of noncontingency operator, essence was 
studied in the literature on the logic of essence and accident [13, 15].^ There, 
as the only primitive modality, is essential” means “if ip is true, then ip is 
necessarily true”, and accident operator is defined as the negation of essence. 

This paper is intended to propose a strong variation of noncontingency, which 
we call strong noncontingency. A formula is called strongly noncontingent, if no 
matter whether it is true or false, it does it necessarily; otherwise, it is weakly 
contingent, i.e., if no matter whether it is true or false, it could have been 
otherwise. We denote the strong noncontingency operator by A. Intuitively, 
kp is read as “if p is true, then p is necessarily true, and if p is false, then 
p is necessarily false”. The interpretation of the new operator is in line with 
Hintikka’s analysis for question embedding verbs in [8]. For instance, in the 
setting of epistemic logic, ^p is strongly noncontingent’ means that ‘if p is true, 
then the agent knows that p is true, and if p is false, then the agent knows that 
p is false’. Besides, this operator can count as a stronger version of the essence 
operator. Moreover, this operator is also related to an alternative semantics for 
agreement operator proposed in [10]. 

The paper is organized as follows. Section 2 defines the language and se¬ 
mantics of strong noncontingency logic, which is a fragment of a much larger 
logic. In Section 3 we compare the relative expressivity of strong noncontingency 
logic and other logics, which turns out that the new logic is in between standard 
modal logic and noncontingency logic. Section 4 investigates the frame defin¬ 
ability for strong noncontingency logic. A notion of bisimulation and that of 
bisimulation contraction for strong noncontingency logic are proposed in Section 
5. Based on the bisimulation, we characterize this logic as (strongly noncontin¬ 
gent) bisimulation invariant fragment of standard modal logic and of first-order 
logic. Sections 6 and 7 axiomatize strong noncontingency logic over various 
classes of frames. Section 8 compares our work with [10]. We conclude with 
some future work in Section 9. 


2 Language and Semantics 

First, we introduce various extensions of the language of classical propositional 
logic, although we will mainly focus on the language of strong noncontingency 
logic. 

Definition 1 (Language £(□, A, o, A)). Given a set P of propositional vari¬ 
ables, the logical language £(□, A, o, A) is defined as: 

p :■.= J \ p \ ^p \ [p ^ p) \ Up \ lS.p \ op \ kp 

^As pointed out in [15, page 94], “the work in [13] can be seen as a variation and continu¬ 
ation of the work done on [non] contingency logics.” 
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Without any modal constructs, we obtain the language C of classical proposi¬ 
tional logic; with the only modal construet 'Onp, we obtain the language £(□) of 
modal logic; with the only modal construct we obtain the language /1(A) of 
noncontingency logic; with the only modal construct oip, we obtain the language 
/l(o) of the logic of essence and accident; with the only modal construct kip, we 
obtain the language C{k) of strong noncontingency logic. Given any language 
C in question, if ip G C, we say ip is an C-formula. 

We always omit the parentheses from formulas whenever no confusion arises. 
Formulas G\p, Ap, op, kp express, respectively, ‘it is necessary that p\ ‘it is 
noncontingent that p\ ‘it is essential that p\ ‘it is strongly noncontingent that 
p'. Other operators are defined as usual; in particular, (}p,'Vp,9p,'Wp are 
defined as, respectively, -G-^p, -^Ap, o p, -^kp. 

Definition 2 (Model). A model M is a triple {S, R, V), where S is a nonempty 
set of possible worlds, R is a binary relation over S, V is a valuation function 
from P to P{S). A frame P is a pair {S,R), i.e. a model without a valuation. 
Given s G S, (At, s) is a pointed model, and {P, s) is a pointed frame. We omit 
the parentheses around {M,s) and {P,s) whenever convenient. Sometimes we 
write s G Ad for s G S. And we denote by R{s) the set of successors of s, that 
is, R{s) = {t € S' I sRt}. Model A4 is said to be a JC-model (resp. V-model, 
P-model, B-model, d-model, h-model, PB-model, Sd-model, Sh-model) if R is 
arbitrary (resp. serial, reflexive, symmetric, transitive. Euclidean, reflexive and 
symmetric, reflexive and transitive, reflexive and Euclidean). A K.-frame and 
the like are defined similarly. 

Definition 3 (Semantics). Given a model Ad = {S,R,V) and s G S, the 
semantics 0 / /!(□, A, o, A) is defined recursively as'f 


Ad, 

s F 

T 


true 

Ad, 

s F 

P 


s GV(p) 

Ad, 

s F 

^p 


Ad,s)d p 

Ad, 

s 1= 

p Alp 


Ad,s F (/? & Ad, s 1= / 

Ad, 

5 1= 

Dp 


yflsRt Ad, t\= p) 

Ad, 

s F 

Ap 


Vti, <2((si?ti & sRt2) => {Ad,ti F <i=> Ad, ^2 F p)) 

Ad, 

5 1= 

o(p 


{Ad, s F \/t{sRt ^ Ad, t F p)) 

Ad, 

s F 

kp 


{Ad, s\= p ^ Wt{sRt Ad, t F p)) & 





(Ad, s F (/j => \/t{sRt Ad, t Id p)) 


If Ad, s 1= p, we say p is true at s, and sometimes write s \= p if Ai is clear; 
if for all s G Ad we have Ad, s\= p, we say p is valid on Ad and write Ad N p; 
if for all Ad based on P we have Ai h p, we say p is valid on P and write 
P F p; if for all P we have P h p, we say p is valid and write F p. Given 
r C £(□, A, o, a), if for all p G T we have Ad, s \= p, we say Ad,s F F, and 
similarly for model validity/frame validity/validity. If there exists {Ad,s) such 

^We here use the notation &, V, =i>,respectively, to stand for the metalanguage ‘and’, 
‘for air, ‘if ■ ■ ■ then ■ ■ ■ ’, ‘if and only if’. 
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that A4, s 1= (fi, we say (p is satisfiable. //F U is unsatisfiable in T, we say 

r entails p over T and write T p. Given any two pointed models {M, s) and 
{Af,t), if they satisfy the same C{\3)-formulas, we say they are D-equivalent, 
notation: (A4,s) =□ {Af,t); if they satisfy the same C{k)-formulas, we say they 
are A-equivalent, notation: {A4,s) {J\f,t). 

It is not hard to show the following validities. 

Fact 4. 1= Ap ^ {p ^ □yj) A {-^p —>■ □“'(/j), N Jp ^ {p A (}^p) V {^p A ()p), 
N Ap AA op A O^p, \= Ap AA A-<p, N Jp •(-> ^^p, N Ap •(-> □(/? V \3^p. 

The following proposition says that our new operator ▲ is indeed strictly 
stronger than the standard non-contingency operator, that is why we call the 
language /1 (a) the language of strong noncontingency logic. And also, the new 
operator is strictly stronger than the essence operator. 

Proposition 5. N Ap -A Ap, 1= Ap -A op, but Ap -A Ap and -> Ap. 

Proof. The validity of Ap — > op is immediate from the semantics. Let M = 
{S,R,V) be a model and s G S. Assume that M,s 1= Ap, then by Fact 4, 
we have A4,s \= {p ^ Dip) A {^p -a Since s 1= V -<p, we can show 

that s N □(/? V thus it is immediate from Fact 4 that s \= Ap. Therefore 
1= Ap -A Ap. 

For the invalidity, consider the following model Af: 

s : p -^ t : ->p 

Since s has only one successor, we have Af, s N Ap. However, one can check 
s p —^ Dp, using Fact 4 we get s Ap, thus Ap —>■ Ap. Besides, s \= o-ip, 
but s )A A-ip, thus o-ip -A A-ip. □ 

As a corollary, we have 

Corollary 6. N Vp —>■ Tp, N •p — Tp, but Tp —>■ Vp and 1^ Tp — •p. 

The following proposition states that necessity and strong noncontingency 
are almost equivalent. We thus call the formula p —>■ (Dp -H- Ap) ‘almost- 
equivalent’ schema (AE). 

Proposition 7. 1= p —?► (Dp GA Ap). 

Proof. Let A4 = {S,R,V) be a model, and assume that A4,s 1= p. From the 
assumption and Fact 4 it is clear that N Ap -A Dp. We only need to show 
A4.,s (= Dp —Ap. For this, suppose that AA.,s N Dp, then obviously Ai,s 1= 
p -A Dp; moreover, from the assumption it follows that AA,s \= -<p -A □“'P, 
thus A4, s 1= (p —>■ Dp) A (-ip —>■ □-'p). According to Fact 4 again, we conclude 
that A4, s N Ap, as desired. □ 

The schema AE motivates us to propose the desired canonical relation for 
the axiomatic systems below. 
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The logic C{a) is not normal, because tp) ^ {A(p A'ip) is invalid. 

Neither is C{a) monotonic, since 1= does not imply N k(p ktp, as 

illustrated below. 

M : S', -•p, q -^ t : -ip, -tq 

It is not hard to show that A4, s 1= k{p q) A kp but A4, s kq. Moreover, 
^ p Aq ^ q but 1^ A(p A g) -4 kq. 

Although k{(p {kip -A ktjj) is invalid, we have a weaker validity. 

Proposition 8. kp A k{p ^ ip) Ap ^ kip is valid. 

Proof. Given an arbitrary model M = {S, R, V) and any s € S, suppose that 
Ad, s N kp A k{p Ip) A p, to show Ad, s b kip. By supposition and Prop. 7, 
we have s t= \I\p. If s 1= then s p ^ ip, from which and supposition s 1= 
k{p ^ Ip) and Prop. 7, it follows that s 0{p ^ ip), thus we can get s b Oip. 
If s b -lip, then s b -i{p -A ip), from which and supposition s b k{p -A ip) and 
Fact 4, it follows that s b -A ip), thus we can get s b O^ip. We have thus 

shown that s b ('0 —>■ Oip) A {^ip -A O^ip), then by Fact 4 again, we conclude 
that s b kip. □ 


3 Relative expressivity 

In this section, we compare the relative expressivity among different logics /i(A), 
£(□) and jC(A). A related technical definition is introduced as follows. 

Definition 9 (Expressivity). Given logical languages Ci and £2 that are inter¬ 
preted on the same class M of models, 

• £2 is at least as expressive as £ 1 , notation: £1 :< C 2 , if for any p £ Ci, 
there exists ip & C 2 such that for all (Ad, s) G M, we have A4, s p <A>- ip. 

• £1 and £2 are equally expressive, notation: £1 = £ 2 , if £1 A £2 and 
£2 ^ £i- 

• £1 is less expressive than £ 2 , or £2 is more expressive than £ 1 , notation: 

£1 £ 2 , if £1 A £2 and £2 7 ^ £ 1 . 


3.1 C{A) vs. £(□) 

We first compare the relative expressivity of £(a) and £(□). 

Proposition 10. £(a) is less expressive than £(□) on the class of IC-models, 
B-models, A-models, 5-models. 

Proof. Define a translation t from £(A) to £(□): 

t(T) = T 

t{p) = P 

t{^p) = ^t{p) 

t{p Alp) = t{p) A t{ip) 

t{kp) = {t{p) -A Dt{p)) A {-^t{p) ~A □-it((/?)) 
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It is clear from Fact 4 that t is a truth-preserving translation. Therefore 
£(□) is at least as expressive as C{a). 

Now consider the following pointed models (AI,s) and which can 

be distinguished by an i3(n)-formula D-L, but cannot be distinguished by any 
£(A)-formulas: 

n 

M : s :p Af : t : p 

It is easy to check M and Af are both symmetric, transitive, and Euclidean. 
By induction we prove that for all p G £(a), AI, s 1= p iff A/", t 1= p. The base 
cases and boolean cases are straightforward. For the case of kp^ it is not hard 
to show that A4, s N kp and A/”, t N kp (note that here we do not need to use 
the induction hypothesis), thus A4, s N kp iff A/”, t N kp, as desired. □ 

As for the case of X>-models, the result about the relative expressivity of 
£(a) and /!(□) is same as previous, but the proof is much more sophisticated, 
which needs simultaneous induction. 

Proposition 11. C{k) is less expressive than £(□) on the class of 'D-models. 

Proof. By the translation t in the proof of Proposition 10, we have >C(a) ^ 'C(n). 

Consider the following pointed models (AI,s) and (A/", s'), which can be 
distinguished by an £(n)-formula nOp, but cannot be distinguished by any 
£(A)-formulas: 

o 

A4 : s : p ^^ t : ^p Af : s' ■. p ^^ t' : -ip 


It is not hard to see that AA and Af are both serial. By induction on p G 
£(A), we show simultaneously that for all p, (i) Ad, s t= p iff A/", s' 1= p, and (ii) 
Ad, 11= p ifF Af, t' 1= p. The nontrivial case is kp. 

For (i), we have the following equivalences: 


Ad, s t= kp 


sema^ics 
I H/or (i) 

fii). 

semantics 


s \= p iS t \= p 
s' N (p iff 11= (p 
s' N p iff t' N p 
Af, s' N kp 


Ad, t N kp 


sema^ics 
IH for ( ii) 

di). 

semantics 


s N p iff t N p 
s 1= p iff t' N p 
s' N p iff t' N p 
Af,t' N kp 


Therefore, (Ad, s) and {Af, s') cannot be distinguished by any £(A)-formulas. 

□ 


However, on the T-models, the situation is different. 
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Proposition 12. C{k) and £(□) are equally expressive on the class of - 
models. 

Proof. By the translation t in the proof of Prop. 10, we have jC{k) ^ 'C(n). 
Besides, define another translation t' from £(□) to C{a), where the base cases 
and Boolean cases are similar to the corresponding cases for t, and t'{\I\(p) = 
A t'{ip). It is straightforward to show that t' is a truth-preserving trans¬ 
lation, due to the validity of —>■ ip and Prop. 7. Thus /!(□) ^ 'C(a), and 

therefore /1 (a) = /l(n)- □ 


3.2 £(A) vs. £(A) 


We can also compare the relative expressivity of /1 (a) and /1(A). 

Proposition 13. /1(A) is less expressive than /1(a) on the class 
T>-models, B-models, A-models, 5-models. 

Proof. For the cases of 5, consider the following models: 

\ i ^ 

M s : p - ^p Af t : p - 


of K-models, 


O 


It is not hard to show that A4,s N kp but Af,t kp. Therefore kp can 
distinguish the two models. 

However, note that both of s and s' satisfy the same proposition variables, 
and have only one successor. Then we can show by induction that, for any 
ip G /1(A), A4,s 1= ip iff JV,t b ip. This means that the two models cannot be 
distinguished by any formulas of /1(A). 

For the case of H-models, consider the following models: 


M' s'-.p^ -s-p Af' t'-.p^ -^-ip 

Similarly, we can show that AA', s' b kp but A/"', t' Y- kp; however, A4', s' ip iff 
Af', t' p for any p G /1(A). □ 

Proposition 14. /1(a) and /1(A) are equally expressive on the class of P- 
models. 

Proof. We only need to show that, on the class of T-models, b kp GA Ap. 
The validity of kp Ap was shown in Prop. 5. For the validity of the other 
direction, given any reflexive model AA = (S', R, V) and any s G S, suppose 
towards contradiction that A4,s b Ap but s Y kp. Then from the second 
supposition, there exists t such that sRt and (s p ^ t \= p). Since R is 
reflexive, we have sRs. We have thus found two successors of s which disagree 
on the value of p, hence s Y Ap, contrary to the first supposition. □ 

From Propositions 10-14, we obtain the results on the relative expressivity 
of /1(A) and /!(□), which was shown in [6, Section 3.1]. 

Corollary 15. /1(A) is less expressive than /!(□) on the class of IC-models, 
V-models, A-models, B-models, 5-models, but they are equally expressive on the 
class of T-models. 
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4 Frame definability 

As have been shown, all of the five basic frame properties can be captured by 
standard modal logic, e.g., the property of reflexivity can be captured by the 
£(n)-formula Dp —?> p, refer to e.g. [1]. It is also shown in [17, Corollary 4.4] 
that these five basic frame properties cannot be defined by £(A)-formulas. In 
this section, we do the same job for the logic £(a). It turns out that the results 
are inbetween: some of the five basic frame properties are undefinable in C{A), 
some is definable. 

Definition 16 (Frame definability). Let¥ be a class of frames. We say that¥ 
is definable in C{k), if there exists F C C(k) that defines it, viz., for any T , T 
is in¥ iff J- F. In this case we also say F defines the property of¥. IfT is a 
singleton set (e.g. {p}), then we write F \= p for T N {p}. 

Let F = {S, R). Say i? is a coreflexive relation^, if for all s,t G S, sRt implies 
s = t; intuitively, every point in S can at most ‘see’ itself. Say is a coreflexive 
frame, if R is corefiexive. 

Proposition 17. Let F,F' be both coreflexive frames. Then given any p € 
£(a), we have F 'f p iff F' \= p. 

Proof. Let F = {S,R),F' = {S',R') be both coreflexive frames, and let p G 
£(A). 

Suppose that F p. Then there exists M. = {F, V) and s G S such that 
M.,s^ p. Because S' is nonempty, we may assume that s' G S'. Define a 
valuation V on F' as p G V'{s') iff p € F(s) for all p G P. Since F and F' are 
both coreflexive, both s and s' can at most see itself. By induction on tfj G £{a), 
we can show that for every ip G £(a), M., s 1= "0 iff A4', s' \= ip (note that for the 
case of Ap, we do not need the induction hypothesis here). Thus A4',s' 1^ p, 
and therefore F' p. The converse is similar. □ 

Proposition 18. The frame properties of seriality, reflexivity, and endpointed- 
ness are not definable in C{a). 

Proof. We adjust the example in Prop. 10, i.e., consider the following two 
frames: 



Both frames are coreflexive. By Prop. 17, we have: for every p G £{a), 
F \= p iS F' \= p. Notice that F is serial (resp. reflexive), while F' is not; F' is 
an endpoint frame, but F is not. 

The argument now continues as follows. Consider seriality: if seriality were 
defined by a set F of £(A)-formulas, then as F is serial, then N F. Ks F and 
F' satisfy the same £(A)-formulas, we should also have F' N F, thus F' should 
be serial. However, F' is not serial. Therefore, seriality is not definable in >C(a). 

The similar argument goes for the other cases. □ 

®The terminology coreflexive relation is taken from the website 
http://en.Wikipedia.org/wiki/Coreflexiv6_relation. 
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Transitivity and Euclidicity are also undefinable with C{k), though the proof 
is a little more tricky. 

Proposition 19. The frame properties of transitivity and Euclidicity are not 
definable in £(a). 

Proof. Consider the following frames: 

n 

T: s ^ t T' : s' 

We first show that (*): for any ip € C{k), F,s\= p J^,t^ p. The proof is 
by induction on p. The nontrivial case is kp. In this case s 1= kp iff for all 
M. based on T, {M,s \= p \E Ai, 11= p) iff t N kp. 

We have thus shown (*), which implies 1= kp. Besides, T' N kp. We can 
now show by induction on p S C{k) that iF p \W J-' p (note that for the 
case of kp, we do not need the induction hypothesis here). 

Observe that F' is transitive and Euclidean, while F is not {sRt, tRs but it 
is not the case that sRs, thus F is not transitive; sRt, sRt but it is not the case 
that tRt, thus F is not Euclidian). 

The argument now continues as follows. Consider transitivity: if transitivity 
were defined by a set T of £(A)-formulas, then as F' is transitive, then F' N T. 
As F and F' satisfy the same £(A)-formulas, we should also have N T, thus 
F should be transitive. However, F is not transitive. Therefore, transitivity is 
not definable in /1 (a). 

The argument is similar for the case of Euclidicity. □ 

In spite of so many undefinability results, we have the following definability 
results. 

Proposition 20. The property of symmetry is definable in C{k). 

Proof. Let F = (S', i?) be a frame. We claim that symmetry is defined by the 
£(A)-formula p k{kp —>■ p), i.e., 

F N '\/xVy{xRy — yRx) iff N p — k{kp p). 

Suppose that F is symmetric. Given any model AA based on F and any s G 
S, assume towards contradiction that AA,s \= p but At, s A(Ap —> p). Then 
s 1= Ap —>■ p, and thus there exists t G S such that sRt and AA,t t= ^{kp —>■ p), 
hence t \= kp and t N -ip, i.e., t N -ip A A-ip. Since sRt and R is symmetric, 
we have tRs. By semantics of A, we conclude that s N -ip, contrary to the 
assumption. 

Suppose that F is not symmetric, that is, there are s,t such that sRl but 
not tRs. Clearly, s ^ t. Define a valuation E on A as V{p) = {s}. Then 
{F, E), s N p, thus s N Ap —> p. Since t ^ s, and s is not reachable from t, it 
follows that t p, and for all u such that tRu, we have u ^ s, thus m E p. This 
implies t N Ap, and then t E kp ^ p, and hence s E A(Ap —>• p). Therefore 
{F, E), s E p —A(Ap —>■ p), which implies that Fp ^ k{kp —>■ p). □ 
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Proposition 21. The frame property of coreflexivity is definable in €-{k). 

Proof. Consider the £(A)-formula kp. We show that for each frame T = {S, R), 
N Ap iff 1= \fxVy{xRy x = y). 

‘If’: Suppose that T N \/x\/y{xRy x = y). Then given any M = {R, V) 
and any s G S', if for each t with we have s = t, then s 1= p iff t N p, and 
thus s 1= Ap, therefore R 1= Ap. 

‘Only if’: Suppose that R Mx'iyfxRy x = y). Then there exist s,t G S 
such that sRt but s Define a valuation V on R such that V{p) = {s}, then 
s 1= p but t p, and thus {R, V),s\^ kp, therefore R Ap. □ 

As mentioned before, all of the five basic frame properties are definable in 
£(□), but not definable in i3(A); however, in C{k), some of the properties in 
question are undefinable, some of them is definable. This can be explain in 
terms of the fact that the expressivity of £(a) is in between that of £(□) and 
that of £(A) (see Prop. 10 and Prop. 13). 

5 Bisimulation and Characterization results 

In this section, we propose a notion of bisimulation for the logic 11 (a), and 
define a notion of bisimulation contraction for the same logic. Based on this 
bisimulation, we characterize the strong noncontingency logic within standard 
modal logic and within first-order logic. 

5.1 Bisimulation 

First, let us introduce the standard notion of bisimulation, which we call □- 
bisimulation. 

Definition 22 (D-bisimulation). Let A4 = {S,R,V) and Ai' = {S',R',V') be 
models. A nonempty binary relation Z over S is called a D-bisimulation between 
A4 and M', if sZ.s' implies the following conditions hold: 

(Inv) for all p G P, s G V (p) iff s' G V'(p); 

fO-ForthJ if sRt, then there exists t' G S' such that s'R't' and tZt'; 
(O-Back) if s'R't', then there exists t G S such that sRt and tZt'. 

We say that (At,s) and {Ad', s') are D-bisimilar, notation: {Ad,s) tin 
(Ad', s'), if there exists a \~\-bisimulation Z between Ai and Ad' such that sZs'. 

D-bisimulation is a notion tailored to standard modal logic 11(D). Under 
this notion, it is shown that ll(D)-formulas are invariant under D-bisimulation, 
thus 11(D) cannot distinguish D-bisimilar models, and on image-finite models 
(or even ll(D)-saturated models)"^, D-equivalence coincides with D-bisimilarity 
(c.f., e.g. [1]). The following property of bisimilarity will be used in the sequel. 

^Given a model A4 = {S, R, V), A4 is said to be image-finite, if for any s £ S, the set R{s) 
is finite; M is said to be C{D)-saturated, if for any F C £(□) and any s £ S, it all of finite 
subsets of r are satisfiable in R{s), then F is also satisfiable in R{s). 
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Proposition 23. Let A4 = {S, R, V) and M' = {S', i?', V) be two models, and 
s G S and s' S S'. Then {M,s) tin implies the following conditions: 

1. For all p € P, s G V{p) iff s' G V'{p); 

2. If sRt, then there is a t' in A4' such that s'R't' and t tin t'i 

3. If s'R't', then there is a t in A4 such that sRt and t tin t'. 

Proof. Follows directly from the fact that tin is a □-bisimulation and the defin¬ 
ition of D-bisimulation. □ 

However, the notion of D-bisimulation is too refined for the logic >C(a), as 
will be shown below. The following example arises in the proof of Prop. 10: 

n 

M : s :p Af : t : p 

It is not hard to show that A4 and Af are both image-finite models, and that 
{AA, s) and {A/, t) satisfy the same £(A)-formulas, but they are not D-bisimilar. 
Therefore, we need to redefine a suitable bisimulation notion for /1 (a). 

Definition 24 (A-bisimulation). Let A4 = {S,R,V). A nonempty binary rela¬ 
tion Z over S is called a A-bisimulation on AA, if sZs' implies that the following 
conditions are satisfied: 

(Inv) for all p € P, s G V (p) iff s' G V{p); 

(k-Forth) if sRt and {s,t) ^ Z for some t, then there is a t' such that s'Rt' 
and tZt'; 

(k-Back) if s'Rt' and {s' ,t') ^ Z for some t', then there is at such that sRt 
and tZt'. 

We say that {AA,s) and {A4',s') are A-bisimilar, notation: {AA,s) t±A 
{AA',s'), if there exists a k-bisimulation Z on the disjoint union of AA and 
AA' such that sZs'. 

Proposition 25. If Z and Z' are both k- bisimulations on AA, then Z U Z' is 
also a k-bisimulation on AA. 

Proof. Suppose that Z and Z' are both A-bisimulations on At, to show Z U Z' 
is also a A-bisimulation on AA. Obviously, Z U Z' is nonempty, since Z and Z' 
are both nonempty. We need to check that Z U Z' satisfies the three conditions 
of A-bisimulation. For this, assume that (s,s') G Z U Z'. Then sZs' or sZ's'. 

(Inv): If sZs', then as ^ is a A-bisimulation, we have: given any p G P, 
s G V{p) iff s' G V{p); if sZ's', then as Z' is a A-bisimulation, we also have: 
given any p G P, s G P(p) iff s' G P(p). In both case we have that given any 
p G P, s G l/(p) iff s' G V{p). 

(A-Forth): Suppose that sRt and (s,t) ^ZVIZ', then (s,t) ^ Z and (s,<) ^ 
Z'. If sZs', then since Z is a A-bisimulation on AA, there exists t' such that 
s'Rt' and {t,t') G Z, and hence {t,t') G Z U Z'; if sZ's', then since Z' is a 
A-bisimulation on AA, there exists t' such that s'Rt' and {t,t') G Z', and hence 
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also {t, f) G ZU Z'. Therefore in both cases, there exists t' such that s'Rt' and 

^zy^z’. 

(A-Back): The proof is similar to that of (A-Forth). □ 

Thus we can build more sophisticated A-bisimulations from the simpler A- 
bisimulations. In particular, by Def. 24, we can see that A-bisimilarity is the 
largest A-bisimulation. And also, A-bisimilarity is an equivalence relation. Note 
that the proof is highly nontrivial. 

Proposition 26. The k-bisimilarity 0 , 1 ^ equivalence relation. 

Proof. We need only show that t±A satisfies the three properties of an equival¬ 
ence relation. 

Reflexivity: Given any model M = {S, R, V) and s G S', to show that 
iM,s) t±A {M,s). For this, define Z = {{w^w) \ w € S}. First, Z is 
nonempty, as sZs. We need only show that Z satisfies the three conditions 
of A-bisimulation. Suppose that wZw. 

It is obvious that w and w satisfy the same propositional variables, thus 
(Inv) holds; suppose that wRt and {w, t) ^ Z for some t € S, then obviously, 
there exists t' = t such that wRt' and tZt', thus (A-Forth) holds; the proof of 
(A-Back) is analogous. 

Symmetry: Given any models M = {S,R,V) and M' = {S',R',V') and 
s G S and s' G S', assume that (A4,s) i±^ (At', s'), to show that (A4',s') 

(j\4,s). By assumption, we have that there exists A-bisimulation Z with sZs'. 
Define Z' = {(in, in') | in G 5, w' € S', w'Zw} U {iw,t) \ w,t G S, wZt} U 
{{w',t') I w',t' G S', w'Zt'}. First, since sZs', we have (s',s) G Z', thus Z' 
is nonempty. We need only check that Z' satisfies the three conditions of A- 
bisimulation. Suppose that wZ'w'. 

By supposition, we have w'Zw. Using (Inv) of Z, we have that w' and w 
satisfy the same propositional variables, then of course w and w' satisfy the same 
propositional variables, thus (Inv) holds. For (A-Forth), suppose that wRt and 
{w,t) ^ Z' for some t G S, then by definition of Z', {w,t) ^ Z. Using (A-Back) 
of Z, we infer that there exists t' G S' such that w'R't' and t'Zt, thus tZ't'. 

The proof of (A-Back) is similar, by using (A-Forth) of Z. 

Transitivity: Given any models M = {S^,R^, V^), M = {S^, R^, V^), 

O = {S^,R^,V‘^) and s G 5'^, t G S-^, u G S'^, assume that {M,s) t±A 
(A/”, t) and {JV,t) t±A (P,u), to show that {M,s) t±A {C>,u). By assumption, 
we have that there exists A-bisimulation Zi on the disjoint union of A4 and A/" 
such that sZit, and there exists A-bisimulation Z 2 on the disjoint union of A/" 
and O such that tZ 2 U. We need to find a A-bisimulation Z on the disjoint union 
of At and O. 

Define Z = {{x,z) | a: G S^, z G S'^, there is a y G such that xZiy, yZ 2 z}\J 
{{x,x') \ x,x' G S'^, xZix'}iJ {{z,z') \ z,z' G S^, zZ 2 z'} U {(x, x') \ x,x' G 
S^, there are y,y' G such that 2 /^ 2 ?/', xZiy, x'Ziy'} Li {{z, z') \ z,z' G 
S'^, there are y,y' G S-^ such that yZiy', yZ 2 Z, y'Z 2 z'}. First, since sZR and 
tZ 2 U, by the first part of the definition of Z, we have sZu, thus Z is nonempty. 
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We need only check that Z satisfies the three conditions of A-bisimulation. Sup¬ 
pose that xZz. Then by the first part of the definition of Z, there is a y G 
such that xZ\y and yZ 2 Z. 

(Inv): as Z\ and Z^ are both A-bisimulations, x and y satisfy the same 
propositional variables, and y and z satisfy the same propositional variables. 
Then x and z satisfy the same propositional variables. 

(A-Forth): suppose that xR-^x' and {x,x') ^ Z for some x' G 5^, then by 
the second part of the definition of Z, we obtain {x,x') ^ Zi. From this, xZiy 
and (A-Forth) of Zi, it follows that there exists y' G such that yR^y' and 
x'Ziy'. Using xZiy,x'Ziy', {x,x') ^ Z and the fourth part of the definition of 
Z, we get (y, y') ^ Z 2 . From this, yZ 2 Z and (A-Forth) of Z 2 , it follows that 
there exists z' G such that zR^z' and y'Z 2 Z'. Since x'Ziy' and y'Z 2 z\ by 
the first part of the definition of Z, we obtain x'Zz'. We have shown that, there 
exists z' G such that zRP z' and x' Zz', as desired. 

(A-Back): the proof is similar to that of (A-Forth), but in this case we use 
the third and fifth parts of the definition of Z, rather than the second or fourth 
parts of the definition of Z. □ 

The following result indicates the relationship between A-bisimilarity and 
□-bisimilarity: A-bisiinilarity is strictly weaker than D-bisimilarity. This cor¬ 
responds to the fact that /1(A) is strictly weaker than /!(□). 

Proposition 27. Let {M, s), {M', s') be pointed models. If{M,s) tin 
then (A4,s) tii {A4',s'); but the converse does not hold. 

Proof. Suppose that {M.,s) tin (.^^s0• Define Z = {{x,x') \ x tin x'}. We 
will show that Z is a A-bisimulation on the disjoint union of A4 and A4' with 
sZs'. 

First, by supposition, we have sZs', thus Z is nonempty. We need only check 
that Z satisfies the three conditions of A-bisimulation. Assume that xZx'. By 
definition of Z, we obtain x tin x'. Using item 1 of Proposition 23, we have x 
and x' satisfy the same propositional variables, thus (Inv) holds. For (A-Forth), 
suppose that xRy and (x, y) ^ Z for some y, then using item 2 of Proposition 
23, we get there exists y' in M' such that x'R'y' and y tin ^/^ thus yZy'. The 
condition (A-Back) is similar to prove, by using item 3 of Proposition 23. 

For the converse, recall the example in Proposition 10. There, let Z = 
{(s, s), (s,t)}. It is not hard to show that Z is a A-bisimulation on the disjoint 
union of Ai and A/", thus {M,s) ti^ (A/", t). However, {M,s) fta (A/", t), as 
s Z DT but t N DT. □ 

The following result says that /l(A)-formulas are invariant under A-bisimilarity. 
This means that /l(A)-formulas cannot distinguish A-bisimilar models. 

Proposition 28. For any models {M,s) and {M',s'), if{M,s) t±A {M',s'), 
then (Ad,s) =a (Ad', s'). In other words, k. -bisimilarity implies k- equivalence. 

Proof. Assume that (A4,s) 1 ±a (Ad', s'), then there is a A-bisimulation Z on 
the disjoint union of Ad and Ad' such that sZs'. We need to show that for any 
(f G /1(a), Ad, s 1= iff Ad', s' 1= ip. 
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The proof continues by induction on the structure of ip. The non-trivial case 
is kip. 

Suppose that M.,s kp. Then there exists t such that sRt and (s 1= ^ 

p). Without loss of generality, assume that s \= p and ti^p, then (s, t) ^ Z 
by the induction hypothesis. We obtain by (A-Forth) that there exists t' such 
that s'R't' and tZt'^ thus {A4,t) t±A From s t±A s' and the induction 

hypothesis and s 1= it follows that s' \= p. Analogously, we can infer t' Z p. 
Therefore A4',s' Z kp. For the converse use (A-Back). □ 

With the notion of A-bisimulation, we can simplify the proofs in the previous 
sections. We here take Proposition 11 as an example, to show that (A4,s) and 
(A/", s') therein are A-bisimilar, rather than using simultaneous induction. For 
this, we define Z = {(s,s'), (t,t)}®. We can show that Z is indeed a A- 

bisimulation on the disjoint union of A4 and W, thus s s' and t t±A t'. By 
Proposition 28, we have for all p G /1(A), (i) M.,s 1= iff A/", s' 1= p, and (ii) 
A4, tZ p \E M ,t' Z p. 

For the converse, we have 

Proposition 29 (Hennessy-Milner Theorem). For any image-finite models A4,A4' 
and s G Ad, s' G Ad', {M,s) =a (Ad', s') ijf (Ad, s) t±A (Ad', s'). 

Proof. Let Ad and Ad' be both image-finite models and s G Ad and s' G Ad'. 
Based on Proposition 28, we need only to show the direction from left to right. 
Assume that (Ad,s) {A4',s'), we need to show that is a A-bisimulation 
on the disjoint union of Ad and Ad', which implies (Ad,s) (Ad',s'). It 
suffices to show the condition (A-Forth), as the proof for (A-Back) is similar. 

Suppose that there exists t such that sRt and s L to show for some 
t' it holds that s'R't' and t t'. Since s L there is a G C{k) such 
that s Z p but t Z p^ and thus s Z kp due to sRt. By assumption, we have 
s' Z p and s' Z kp., and thus there exists v' such that s'R'v' and v' Z p. Let 
S' = {f I s'R't'}. It is easy to see that S' 0. As Ad' is image-finite. S' must 
be finite, say S' = {^' 1 ,^ 2 ;''' j If there is no t' G S' such that t t', then 
for every t' G S' there exists pi G C{k) such that t Z pi but t' pi. It follows 
that t Z Pi A ■ ■ ■ A Pn, and thus t Z pi A ■■■ A Pn ^ p', furthermore, from sZ p 
follows that s Z Pi A ■■■ A Pn ^ p. Hence s Z k{pi A - ■ ■ Apn ^ p). Note that 
for all t'^ € S', t'^ Z Pi A ■■■ A Pn, thus t' Z pi A ■■■ A Pn -A p. We also have 
s' Z Pi A ■ • ■ A Pn ^ p, and then s' Z k{pi A A pn ^ p), which is contrary 
to the assumption and s Z k{pi A ■■■ A pn ^ p). Therefore, we have for some 
t' it holds that s'R't' and t t'. □ 

If we remove the condition of ‘image-finite’, then ^ does not coincide with 

= A- 

Example 30. Consider two models Ad = {S,R,V) and Ad' = {S',R',V'), 
where 5" = N U {s}, i? = {(s, n) | n G N}, V(pn) = {nj and S" = N U {s', w}, 

®Note that in order to guarantee Z is indeed a A-bisimulation, the pair {t,t) must be 
contained in Z. 
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R' = {(s',n) I n S N} U {(s', w)}, and V'(pn) = {n}. This can be visualized as 
follows: 



Pi P2 P3 ■■■ Pi P2 P3 


We have: 

• Neither of A4 and A4' is image-finite, as s and s' both have infinite many 
successors. 

• (A^,s) =A By induction on p G 'C(A), we show: for any ip, 

Ai,s t= ip iff M', s' 1= p. The non-trivial case is k.p, that is to show, 
A4,s 1= kp iff A4', s' N kp. The direction from right to left is easy, just 
noting that R{s) C R'(s'). For the other direction, suppose that Ai,s 1= 
kp. Then for any n S N, we have that s\= p iff n\= p, which implies that 
s' \= p iff n\= p by the induction hypothesis. As p is finite, it contains only 
finitely many propositional variables. Without loss of generality, we may 
assume that n is the largest number of subscripts of propositional variables 
occurring in p. Then by induction on p, we can show that n 1 p iff 
uj p. Thus given any n G N U {w}, s' \= p iff n p. Therefore 
A4',s' t= kp, as desired. 

• {A4,s) (A4',s'). Suppose towards contradiction that {A4,s) tiA 

{A4',s'), then there exists a k-bisimulation such that sZs'. Now we have 
s'R'uj. And also {s',uj) ^ Z, for otherwise s' thus e.g. s' 1= kpi iff 

u! N kpi, contrary to the fact that s' Z kpi but to Z kpi. By the condition 
(k-Back), we obtain that there exists to £ N such that sRm and mZuj, 
thus m ^ u!. However, to N pm but uj Z pm, contradiction. 

We can extend the result of Prop. 29 to the following proposition. Here by 
C{k)-saturated model we mean, given any s in this model and any set P C £.{k), 
if all of finite subsets of P are satisfiable in the successors of s, then P is also 
satisfiable in the successors of s. 

Proposition 31. Let {M,s) and (At', s') be C{k)-saturated pointed models. 
Then {M, s) =a (Al', s') iff (At, s) (At', s'). 

Proof. Based on Proposition 28, we need only show the direction from left to 
right. 

Let At = {S,R,V) and At' = {S',R',V') be £(A)-saturated models. Sup¬ 
pose that (At, s) =A (At', s'), we will show that =a is a A-bisimulation on the 
disjoint union of At and At', which implies (At,s) (At', s'). It suffices to 
show the condition (A-Forth) holds, as the proof of (A-Back) is similar. 

Assume that sRt and s t for some t, to show there exists t' such that 
s'R't' and t =a t'. Let P = {(/? £ C{k) \ t Z p}. It is clear that t N P. Then for 
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any finite S C F, 11= /\ S. As s t, there exists '0 S i3(A) such that s 1= 0 but 
t !e^ tp, thus s N A S ^ ^ but t l\Y^ ^ ip, hence s)^ A(A S —^ ip). If for any 
u' with s'R'u' we have rt' A then u' 'f /\Ti ^ ip. Since s s' and s 1= 0, 
it follows that s' t= ip, thus s' N A ^ 0, hence s' N A(A S —>• 0), contrary to 

s =A s' and s A(AS —>■ ip). Therefore there exists u' such that s'R'u' and 
u' N A Because Ad' is £(A)-saturated, for some t' we have s'R't' and t' \= F. 
Furthermore, t t': given any ip £ >C(a), ii t\= ip, then £ F, hence t' \= ip] if 
ti^ip, i.e., t \= -<ip, then -'ip £ F, hence t' \= -'ip, i.e., t' ip, as desired. □ 

The condition ‘£(A)-saturated’ is also indispensable, which can also be il¬ 
lustrated with Example 30. In that example. Ad is not £(A)-saturated. To 
see this point, note that the set {-'Pi, —'P 2 , • ■ • , ~'Pn} is finitely satisfiable in the 
successors of s, but the set itself is not satisfiable in the successors of s. In the 
meantime, (Ad,s) =a {M',s') but {M,s) (Ad', s'). 

We have seen from Def. 24 that the notion of A-bisimulation is quite different 
from that of □-bisimulation. However, it is surprising that the notion of A- 
bisimulation contraction is very similar to that of D-bisimulation contraction, 
by simply replacing t±n with iiA- 

Definition 32 (A-bisimulation contraction). Let Ad = {S,R,V) be a model. 
The A-bisimulation contraction o/Ad is the quotient structure [Ad] = ([S'], [i?], [H]) 
such that 

• [S] = {[s] I s £ S}, where [s] = {t £ S | s t}i 

• [s][i?][t] iff there exist s' £ [s] and t' £ [t] such that s'Rt'; 

• \y]{p) = {W I s £ V{p)} for all p € P. 

Under this definition, we obtain that the contracted model (via tii) is A- 
bisimilar to the original model, and that the SS-model property is preserved 
under A-bisimulation contraction. 

Proposition 33. Let Ad = {S, R, V) be a model, and let [Ad] = ([S], [R], [U]) be 
the k-bisimulation contraction of M. Then for any s € S, we have ([Ad], [s]) t±A 
(M,s). 

Proof. Define Z = {([wj],i(;) j ic £ S} U {([w], 0]) j w, u £ S, ic First, 

since S is nonempty, Z is nonempty. We need to show that Z satisfies the three 
conditions of A-bisimulation, which entails ([Ad], [s]) (Ad,s). Assume that 

[w]Zw. 

(Inv): by the definition of [U]. 

(A-Forth): suppose that [r(;][i?][u] and ([w], [z;]) ^ Z, then by definition of 
[S], there exist w' £ [zc] and v' £ [u] such that w'Rv'. As [zc] = [zc'j and 
0] = [u'j, we get from the supposition that ([zc'j, [u'j) ^ Z. By definition of Z, 
we obtain w' v'. Because is a A-bisimulation, from w w' it follows 
that there exists u such that wRu and u t±A v', thus [zi] = [z;'] = [zi]. It is clear 
that [u]Zu, that is, [v]Zu. 
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(A-Back): suppose that wRv and {w,v) ^ Z. By definition of [i?], we have 
Obviously, [v\Zv. □ 

Proposition 34. Let M. = {S,R,V) be a model, and let [M] = ([S'], [R], [P]) 
be the A-bisimulation contraction ofA4. If M is an SH-model, then [M] is also 
an Sb-model. 

Proof. Suppose that M = (S, R, V) is an S5-model, to show that [A^] = 
([S], [R], [P]) is also an S5-model. We need to show that [R] is an equivalence 
relation, that is, [i?] satisfies the properties of refiexivity, symmetry and trans¬ 
itivity. The nontrivial case is transitivity. For this, given any [s], [t], [m] G [S], 
assume that [s] [i?] [t] and [t] [R] [it], we need only show that [s] [i?] [m] . 

By assumption and the definition of [i?], there exists s' G [s],t' G [t] such 
that s'Rt', and there exists t" G [t],u' G [it] such that t"Ru'. We now consider 
two cases: 

• t" i±^u'. In this case, we have [t"\ = [it], then [t] = [it], thus [s][i?][it]. 

• t" It'. In this case, using t' t±A t" (as t' G [t] and t" G [t]) and the 
fact that t±A is a A-bisimulation, we obtain that there exists it" such that 
t'Ru” and it" t±A u', thus it" G [it'j = [it]. Moreover, From s'Rt',t'Ru" 
and the transitivity of R, it follows that s'Ru". We have thus shown that 
there exists s' G [s],it" G [it] with s'Ru", therefore [s][i?][u]. 

In both cases we have [s] [R] [it], as desired. □ 

5.2 Characterization Results 

As N Aip ^ {(fi ^ Di^) A □“'¥>), strong noncontingency logic jC{a) can 

be seen as a fragment of standard modal logic >C(n), and also a fragment of 
first-order logic. In this subsection we characterize strong noncontingency logic 
within standard modal logic and within first-order logic. To make our exposition 
self-contained, we introduce some definitions and results from e.g. [1] without 
proofs. 

Definition 35 (Ultrafilter Extension). Let A4 = {S,R,V) be a model. We say 
that ue(A4) = ([//(S'), i?“®, is the ultrafilter extension of A4, if 

• Uf{S) = {u \ u is an ultrafilter over S}, where an ultrafilter u C V{S) 
satisfies the following properties: 

~ S G u, ^ ^ u, 

— X,Y G li implies X (lY G it, 

— X G u and X C Z Q S implies Z G u 
— For all X G V{S), X G u iff S\X ^ it 

• For all s,t G Uf{S), sR^^'t iff for all X G S, X G t implies X{X) G s, 
where A(Ar) = {w G S \ there exists v such that wRv and v G AT} 
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• V^^(p) = {u € Uf{S) \V{p)£ m}. 

Definition 36 (Principle Ultrafilter). Let S be a non-empty set. Given any 
s G S, the principle ultrafilter tTs generated by s is defined by tTs = {X C S \ 
s S X}. It can be shown that every principle ultrafilter is an ultrafilter. 

Proposition 37. Let M be a model and ue(A4) be its ultrafilter extension. 
Then ue(At) is m-saturated and {A4,s) =□ (ue(At), tTs). 

Since C{a) can be viewed as a fragment of £(□), every £(A)-formula can 
be seen as an £(n)-formula. Thus we have 

Lemma 38. Let M be a model and s G A4. Then ue(A4) is C{k.)-saturated 
and (At,s) {ue{M),TTs). 

From Lemma 38 and Proposition 31, it follows that 

Lemma 39. Let (A4,s) and (A/", t) be pointed models. Then {A4,s) (A/", t) 

implies (ue(Ad), 7 rs) t±A iue{Af), tti). 

We are now close to prove two characterization results: strong noncontin¬ 
gency logic is the A-bisimulation-invariant fragment of standard modal logic and 
of first-order logic. In the following, by an £(n)-formula ip (resp. a first-order 
formula a) is invariant under A-bisimulation, we mean for any models (At,s) 
and {Af,t), if {M,s) t±A (A/", t), then M,s \= ip M ,t 'g p (resp. M.,s 1= a iff 
A/”, t N a). 

Theorem 40. An C(n\)-formula is equivalent to an C{k)-formula iff it is in¬ 
variant under k-bisimulation. 

Proof. Based on Prop. 28, we need only show the direction from right to left. 
For this, suppose that an £(n)-formula p is invariant under A-bisimulation. 

LetMOC'(i^) = {!('!/') I V' € jC{k),p 1 = t(^)}, where t is a translation function 
which recursively translates every £(A)-formulas into the corresponding £(□)- 
formulas. In particular, t{k'ip) = (t(V') —t A {t{-^fi) —t □-'!('!/'))• 

If we can show that MOC{p) 1= p, then by Compactness Theorem of modal 
logic, there exists a finite set F C MOC{p) such that A T N i.e., NAT -G p. 
Besides, the definition of MOC{p) implies that N ATi i-e., \= p ^ l\T, and 
thus F Ar GG p. Since every 7 G F is a translation of an £(A)-formula, so is F. 
Then we are done. 

Assume that A4,s F MOC{p), to show that Ad,s F p. Let E = {t{fi) \ 
A G C{k),M,s F t(A)}- We now claim E U {p} is satisfiable: otherwise, by 
Compactness Theorem of modal logic again, there exists finite E' C E such that 
V? F - 1 A E', thus -1 A 51' G MOC{p). By assumption, we obtain A4, s F -1 A E'. 
However, the definition of E and E' C E implies A4, s F A E', contradiction. 

Thus we may assume that A/", t F E U {p}. We can show (Ad, s) =a (A/”, t) 
as follows: for any if G C{k), if Ad, s F then Ad, s F t{ilj), and then t{if) G E, 
thus A/",t F t{ij}), hence A/",t F A; if Ad,s if, i.e., Ad,s F -^if, then Ad,s F 
t{^if), and then t{^if) G E, thus A/", t F t{-^if), hence A/", t F -^if, i.e. Af,ti^ if. 
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We now construct the ultrafilter extensions of M and A/", denoted by ue{A4) 
and ue{J\f), respectively. According to the fact that {M,s) (A/", t) and 

Lemma 39, we have {ue{A4),TTs) t±A {ue{Af), irt). Since J\f,t N ip, by Lemma 
38, we have ue{J\f),TTt N p. From supposition it follows that ue(A4),TTs N p. 
Using Lemma 38 again, we conclude that M,s\= p. □ 

Theorem 41. A first-order formula is equivalent to an C{k)-formula iff it is 
invariant under k-bisimulation. 

Proof. Based on Prop. 28, we need only show the direction from right to left. For 
this, suppose that a first-order formula a is invariant under A-bisimulation, then 
by Prop. 27, we have that a is also invariant under D-bisimulation. From van 
Benthem Characterization Theorem (cf. e.g. [1]), it follows that a is equivalent 
to an T(n)-formula p. From this and supposition, it follows that p is invariant 
under A-bisimulation. Applying Thm. 40, p is equivalent to an £(A)-formula. 
Therefore, a is equivalent to an £(A)-formula. □ 


6 Axiomatization: Minimal system 

In this section, we present a complete axiomatic system for C{k) over the class 
of all frames. 

6.1 Axiomatic system and soundness 

Definition 42 (Axiomatic system K^). The axiomatic system consists of 
all propositional tautologies (TAUT), uniform substitution (US), modus ponens 
(MP), plus the following axioms and inference rule: 

AT at 

A-i k-<p O kp 
AA Ap A Ag —A(p A g) 

R From p ^ ip infer kp Ap ^ kip 

A derivation from F to p in notation: F Fk* T, is a finite sequence of 
C{k)-formulas in which each formula is either an instantiation of an axiom, or 
an element of F, or the result of applying an inference rule to prior formulas 
in the sequence. Formula p is provable in K^, or a theorem, notation: h p, if 
there is a derivation from the empty set % to p in . 

Intuitively, Axiom AT means that tautologies are always strongly noncon¬ 
tingent; Axiom A-i says that a formula is strongly noncontingent is the same 
as its negation is strongly noncontingent; Axiom AA states that if two formulas 
are strongly noncontingent, then so is their conjunction; Rule R stipulates the 
almost monotonicity of the strong noncontingency operator. 

Note that when it comes to completeness. Axiom AT is indispensable in the 
system K^, because the subsystem — AT is incomplete. To see this, define 
an auxiliary semantics IF as the same as F, except that all formulas of the form 
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kip are interpreted as false. One can check the system — AT is sound with 
respect to the new semantics Ih, but AT is not valid, which entails that AT is 
not provable in — AT. On the other hand, AT is valid under the standard 
semantics N. Therefore, — AT is not complete with respect to the semantics 

N. 

By induction on n S N, using Axiom A A we have 

Fact 43. For all n £ N, h kpi A • ■ • A kipn —>■ A • ■ • A pn)- 

Proposition 44 (Soundness). The axiomatic system is sound with respect 
to the class of all frames. 

Proof. The validity of Axioms AT and k-> are immediate from the semantics. 

For Axiom AA, given an arbitrary model At = {S,R,V) and any s € S, 
suppose that A4,s N Ap A kq, to show Al,s N k{p A q). First assume that 
s N p A g. Let t £ S' be arbitrary such that sRt. By assumption s N p and 
supposition s N Ap, we obtain t N p. By assumption s \= q and supposition 
s F kq, we have t F g, and then t p A q. We have thus shown that s \= p A q 
implies for all t with sRt, t F p A g. Analogously, we can show that s F p A g 
implies for all t with sRt, ti^ p A q. Therefore, s F A(p A g). 

For Rule R, assume F p —>•'!/;, we need to show F kp A p —>■ kijj. Given any 
model At = {S,R,V) and any s £ S, suppose that A4,s F Ap A p, to show 
At,s F kif. By supposition At,s F p and assumption, we obtain At,s F ip. 
For all t such that sRt, from supposition follows that t F p, and then t \= ip in 
virtue of the assumption. Moreover, it is clear that s ip implies for all t with 
sRt, ti^ ip. Therefore, At,s F kip. □ 

6.2 Canonical model and completeness 

We proceed with the completeness proof for K^. The completeness is shown by 
a construction of canonical model. 

Definition 45 (Canonical Model). Al“ = {S'^,R'^,V‘^) is the canonical model 
for system K^, if 

• S'® = {s I s is a maximal consistent set o/K^}. 

• For any s,t G S®, sRH iff for all p, if p G s, then kp G s implies p Gt. 

• l^^(p) = {s £ S® I p £ s}. 

The definition of canonical relation i?® is inspired by the almost-equivalence 
schema AE (see Prop. 7). Recall that in the canonical model for standard modal 
logic -C(n), the canonical relation is always defined by si?®t iff for all p. Dp £ s 
implies p £ s. Now according to the schema AE, we can replace Dp £ s with 
Ap £ s given p £ s. 

Lemma 46 (Truth Lemma). For any p £ C{k) and any s G S®, we have 

A4®, s F p p £ s. 
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Proof. By induction on ip. The only non-trivial case is kp. 

■^^=: Assume towards contradiction that kp G s but A4, s )A kp. From the 
semantics and the inductive hypothesis, it follows that ipp G s and there exists 
t G S'^ such that sW^t and p ^ t) or {p ^ s and there exists t' G such that 
sR'^t' and p G t'). If the first case holds, then from p G s and the assumption 
kp G s and sW^t, it follows that p G t, contradiction. If the second case holds, 
then since p ^ s, we have ->p G s. By kp G s again. Axiom k-> and Rule US, we 
obtain k-<p G s, thus -^p A k-^p G s, from which and sR'^t' we deduce -^p G t', 
contradiction. 

Suppose that kp ^ s, we need to show that Al“, s kp, by the 
inductive hypothesis, that is to show, {p G s and there exists t G S‘^ such that 
sRH and ^p G t) or {-^p G s and there exists t' G S‘^ such that sRH' and 
p Gt'). First, we show 

1. {ijj \ ktp A £ s} U {-'</?} is consistent, and 

2. {tp I ktp A £ s} U {p} is consistent. 

For 1, if the set is inconsistent, then there exist ipi, - ■ ■ ,'ipn G {ip \ kipAip G s} 
such that \- ipi A ■■■ A ipn ^ p.^ By Rule R, we have h k{ipi A • • • ipn) A {ipi A 
■ ■ • Ipn) kp. Since kipi Aipt G s for all i G [I,n], from Fact 43, it follows that 
k[ipi A • • • A Ipn) A {ipi A • • • A Ipn) G s, thus we have kp G s, contrary to the 
supposition. 

The proof for 2 is similar, in this case we need to use Axiom k-' and Rule 
US. 

Therefore we complete the proofs of I and 2. From 1, the definition of 
and the observation that every consistent set can be extended to a maximal 
consistent set (Lindenbaum’s Lemma), we obtain that there exists t G S'^ such 
that sR'^t and -^p G t. Similarly, from 2, we get that there exists t' G 

such that sR'^t' and p G t'. Since either p G s or -^p £ s, we conclude that 

kp based on the previous analysis. □ 

Proposition 47. Let X be a normal modal logic between K and T: K <G X Q 
T. The following conditions are equivalent: given any F U {p} C C{k), 

(1) BFk* p (there is a derivation from F to p in 

(2) F 1= (T entails p over the class of all frames) 

(3) F \=x P (1^ entails p over the class of frames for X) 

(4) F \^T P (T entails p over the class of reflexive frames) 

Proof. (1) (2): by Prop. 44. 

(2) (3): obviously. 

(3) (4): since X CT, we have \=xQ I=t- 

(4) (1): suppose that F Fk* P, then F U {“'(/j} is K^-consistent. By 

Lindenbaum’s Lemma, there is an s £ 5° such that F U {~'p} C s, i.e. F C s 
and p ^ s. By Lemma 46, A4'^,s \= F but A4°,s F p. Moreover, that i?'” is 
reflexive is immediate from the definition of Therefore, F Ft p. O 

®Note that Axiom AT provides the non-emptiness of the set {ijj \ Aip Atp £ s}. 
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The following are now immediate from Proposition 47. 

Theorem 48. is sound and strongly complete with respect to the class of 
all frames. 

Theorem 49. is sound and strongly complete with respect to the class of 
serial frames. 

Theorem 50. is sound and strongly complete with respect to the class of 
reflexive frames. 

We have seen from Proposition 10 that there is a truth-preserving translation 
function from C{k) to £(□). Thus T(a) can be seen as a fragment of £(□). 
Since £(□) is decidable, we have also the decidability of T(a). 

Proposition 51. The logic of strong noncontingency C{k.) is decidable. 

7 Axiomatization: extensions 

In this section, we give extensions of over various frame classes and prove 
their completeness. Definition 52 indicates extra axioms and the corresponding 
systems, with in the last column of the table the frame classes for which we will 
demonstrate completeness. 

Definition 52 (Extensions of K^). 


Notation 

Axioms 

Systems 

Frame classes 

A4 

kp —!■ kkp 

K4* = T A4 

4 (54) 

kB 

p ^ k{kp p) 

KB^ = + AB 

B (TB) 

A5 

-<kp — k-<kp 

KB5^ = KB‘ + a5 

B5 (55) 

A5' 

p A ^kp —>■ A(p A kp) 

KB5'^ =KB^ +A5' 

B5 (55) 


Analogous to the case of K^, we can show that Axiom AT is indispensable 
in the system K4^. However, Axiom AT is dispensable in KB^, and thus 
in KB5^, since it is provable in KB^ — AT, just letting p in Axiom AB be 
T.^ Thus we can replace KB^ and KB5^ by KB^ — AT and KB5^ — AT, 
respectively. We here still write KB^ and KB5^ to keep consistency. 

To show the soundness of systems K4^ and KB^ with respect to the cor¬ 
responding classes of frames, by Proposition 44, it suffices to show 

Proposition 53. 

• A4 is valid on the class of transitive frames. 

• AB is valid on the class of symmetric frames. 

7 if Ip 

'Note that we need first show the rule - is admissible in KB* — AT. For the 

A93 -H- Ab 

proof refer to Proposition 63, where we do not use Axiom AT. 
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Proof. The validity of AB on symmetric frames is shown in Prop. 20. 

For A4: given any transitive model M = {S, R, V) and any s £ S, assume 
towards contradiction that M,s \= kp but M,s kkp. By assumption, it must 
be the case that there exists t £ S such that sRt and t N -^kp. If s 1= p, then 
from s N kp and sRt we have t p, and thus there exists u such that tRu and 
u p. By the transitivity of R, we have sRu, which is contrary to the fact that 
s N kp A p and u p. If s p, with the similar argument we can also derive a 
contradiction. □ 

Theorem 54 (Completeness of K4^). K4^ is sound and strongly complete 
with respect to the class of A-frames, thus it is also sound and strongly complete 
with respect to the class of SA-frames. 

Proof. Soundness is clear from the soundness of and Prop. 53. 

For completeness, by Thin. 48, we only need to show that is transitive 
(recall that is reflexive). 

Given any s,t,u £ S‘^, suppose that sRH and tR‘^u, we need to show sR'^u. 
Let (f be arbitrary, and assume that k(pA(p £ s. From the assumption and sRH 
it follows that (p £ t. From kp £ s, Axiom A4 and Rule US, we get kkp £ s. 
We have shown that kkp A kp £ s. Then by sR^t again, we deduce kp £ t, 
thus pA kp £ t. From this and tR'^u it follows that p £ u. Therefore sR‘^u. □ 

Theorem 55 (Completeness of KB^). KB^ is sound and strongly complete 
with respect to the class of B-frames, thus it is also sound and strongly complete 
with respect to the class of TB-frames. 

Proof. Soundness is immediate from the soundness of and the validity of 
AB (Prop. 53). 

For the completeness, by Thm. 48, we only need to show that R'^ is symmetric 
(recall that is reflexive). 

Given any s,t £ 5"^. Suppose that sRH, to show tR’^s. For this, given 
any p, and assume that p ^ s, the only thing is to show that kp A p ^ t. 
By assumption, we have -^p £ s, and thus k->p —> —>p £ s. From Axiom AB 
and Rule US, it follows that k{k^p -A ^p) £ s. By supposition, we obtain 
k->p -A —>p £ t. By Axiom k-> and Rule US, we get kp —> —>p £ t, and then we 
conclude that kp Ap ^t, as desired. □ 

One may expect that the same story goes with Axiom A 5 and system 
+ A5. Although A5 can provide the completeness of + A5 with respect 
to the class of (reflexive and) Euclidean frames (see the proof of Thm. 58), un¬ 
fortunately, it cannot provide the soundness of the system in question, because 
A5 is not valid on the class of Euclidean frames (or 55-frames). 

Proposition 56. A5 is not valid on the class of 5-frames (or S5-frames). 

Proof. Consider the following Euclidean (and reflexive) model A4: 




s : p 
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First, as A4,s N p, M,t p and sRt, we have s N -^kp. Second, since t 
can only ‘see’ itself, we get t N kp, i.e. t ^kp, thus s k^kp. Therefore 
Ad, s -lAp —> A-iAp. □ 

We have seen that A5 is not valid on the class of Euclidean frames (or 55- 
frames). However, this formula is indeed valid on the class of symmetric and 
Euclidean frames, as shown below. 

Proposition 57. A5 is valid on the class of B5-frames. 

Proof Suppose not, that is, there exists symmetric and Euclidean model M = 
{S, R, V) and s G 5 such that Ad, s 1= -lAp but Ad, s A-iAp. From supposition, 
it follows that for some t such that sRt and Ad,t N kp. By symmetry of R, 
tRs. We consider two cases. If t N p, then using the fact that t N Ap and tRs, 
we obtain that s 1= p. From this and s t= -'kp, then there exists u G S such that 
sRu and Ad, u p. From sRt and sRu and the Euclidicity of R, it follows that 
tRu, then using t N kp and t 1= p, we obtain rt 1= p, contradiction. If t p, we 
can also get a contradiction by a similar argument. □ 

The axiomatization for C{k) over Euclidean frames is quite involved. Recall 
that unlike Axiom AB, Axiom A5 cannot define the corresponding frame prop¬ 
erty, because the property of Euclidicity is undefinable in /1 (a); unlike Axiom 
A4, Axiom A5 is not valid on the corresponding frames. Despite this, we indeed 
have the following completeness result. 

Theorem 58 (Completeness of KB5^). KB5^ is sound and strongly complete 
with respect to the class of B5-frames, thus it is also sound and strongly complete 
with respect to the class of S5-frames. 

Proof. Soundness is immediate from the soundness of KB^ and Prop. 57. We 
show the completeness. 

By Thm. 55, we only need to show that i?'” is Euclidean. 

Suppose for any s,t,u G S'^ that sRH, sR‘^u, we need show that tR'^u. For 
this, assume for any p that kp A (p G t, we have to show that p G m. From 
sRH and kp G t, it follows that -'{-'kp A k-ikp) G s, then kp G s, namely 
A-ip G s (for otherwise by Axiom A5 and Rule US we get ^kp A k^kp G s, 
contradiction). Moreover, from sRH and p € t, we obtain -'{-'P A k-ip) G s, 
and thus -up ^ s, that is, p € s. We have thus shown that kpAp G s. Therefore 
p G u from sR^u. □ 

Consider the formula A5' : p A -lAp A(p A Ap). 

Proposition 59. A5' is valid on the class of Euclidean frames. 

Proof. Given any Euclidean model Ad = {S, R, V) and any s G S, suppose 
towards contradiction that Ad, s N p A -lAp but Ad, s A(p A Ap). From the 
first supposition, there exists t such that sRt and 11^ p. Because s p A Ap, 
by the second supposition, there exists u such that sRu and u\= p A kp. Using 
sRu, sRt and the Euclidicity of R, we obtain uRt, thus t\=p, contradiction. □ 
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Thus + A5' is sound with respect to the class of Euclidean frames (and 
also iS5-frames). We are unsure whether + A5' is also strongly complete with 
respect to the class of Euclidean frames. We leave this for future work. 

Nevertheless, KB5'^ is sound and strongly complete with respect to the 
class of symmetric and Euclidean frames. 

Theorem 60 (Completeness of KB5'^). KB5'^ is sound and strongly complete 
with respect to the class of B5-frames, thus it is also sound and strongly complete 
with respect to the class of Sb-frames. 

Proof. By Thm. 55 and Prop. 59, we only need to show that R'^ is Euclidean. 

Suppose for any s,t,u € S‘^ that sR'^t and sR'^u, to show tR^u. For this, 
assume for any Lp that p A kp £ t, we need only show p G u. From the 
supposition si?“t and the symmetry of i?“, it follows that tR‘^s. From this and 
the assumption, we have tp G s. 

We can show that kp G s: otherwise, kp ^ s, then ^kp G s. Since p G s, 
by using Axiom A5' and Rule US, we get A((/3 A kp) G s, i.e. k-'{p A kp) G s; 
moreover, -^{p A kp) G s, then from sRH follows that -^{p A kp) G t, contrary 
to the assumption. 

We have thus shown that kp G s. Thus p A kp G s, and hence p G u due 
to sR'^u. □ 


8 The related work 


In [10, page 119], Humberstone proposed an alternative semantics for the agree¬ 
ment operator O. Given a model M = {S, R, V) and a world s G S, 

M, s N Op Vt £ S{sRt {M,s 1= A4, t \= p)). 


Intuitively, Op is true at s, if and only if, s and its all successors agree on the 
truth value of p. One can show that the semantics of O and A are equivalent. 

Humberstone then gave the following axiomatization. Although motivated 
in a different setting, [10, page 119] also axiomatized C{k) over the class of 
arbitrary frames. We call it LA, wherein we have replaced O by A.® 


PL all substitution instances of tautologies 

A1 kp k^p 

A2 kp AJ{p\/tj}) ^ 

A3 kp -A {p A k{p V if)) V {^p A k{^p V x)) 

RA From p infer kp 
MP From p and p ^ if infer if 
RE From p GA if infer kp GA kif 


Inspired by Kuhn’s definition of A in the completeness proof for minimal 
noncontingency logic [12, page 232], Humberstone defined a particular function 

®In [10, note 24], it is pointed out that A3 can also be replaced with At/3 -A A(<^ V i/i) V 
{-•tp A aOp V x)) or Atp -A [tp A A{p V ip)) V A^p V x)- 
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A' such that, for each maximal consistent set s, A'(s) = {ip \ A 0{ip V tjj) G 
s for all tjj}, and then defined canonical relation as sR'^t iff A'(s) C t. Then 
he claimed that the system LA is sound and complete with respect to the class 
of all Kripke frames. 

We tend to find our axiomatization simpler, e.g. with respect to A3 
above. Below we will show that the axioms/rules of LA are all provable/admissible 
in K^. In the following we write h for Lk* • 

Proposition 61. A3 is provable in K^. 


Proof. 

(*) 

p ^ p W Ip 

TAUT 

{ii) 

kp A p ^ k{p\J Ip) 

(*),R 

(Hi) 

kp Ap ^ p A k{p V Ip) 

(m),TAUT 

(iv) 

-np ^^pVx 

TAUT 

{v) 

k-<p A -<p -A- -^p A k{-<p V x) 

{iv), similar to {i) — (Hi) 

(vi) 

kp -A {p A k{p V Ip)) V {^p A k{^p V x)) 

(Mi),(u), A-.,US,TAUT 


□ 


Proposition 62. RA is admissible in K^. 

Proof. Suppose that h tp. Then by Axiom TAUT, we have I- T — ^ Applying 
Rule R, we get h AT A T — kip. Using Axiom AT and Rule MP, we obtain 

h kip. □ 

Proposition 63. RE is admissible in K^. 

Proof. Suppose that \- ip ijj, we need to show that h kip O kif. From 
supposition and Axiom TAUT, it follows that h (/?—>■ '0. With this and Rule R, 
we have h kip A > kijj. Similarly, using h -up —>■ -i0, we can obtain that 
h k^ip A -itp —^ A-i^. Then from Axioms A-',TAUT and Rule US, we infer that 
h kp -A kip. From supposition we also have h 0 —By the similar argument, 
we can get h kip —)• kp, thus we conclude that F kp O kip. □ 

In this paper, we gave a simply minimal axiomatization for /1(a), and its 
extensions with respect to other various classes of frames, and we advanced the 
research by comparing the relative expressivity of C{k) and /l(n), and that 
of C{k) and /3(A). Moreover, we proposed a notion of bisimulation for /3(a), 
based on which we characterized its expressive power within modal logic and 
within first-order logic. We also have results about the frame (un)definability. 

9 Conclusion and future work 

In this paper, motivated by Hintikka’s treatment of question embedding verbs, 
and also the variations of noncontingency operator, we proposed a logic of strong 
noncontingency /3(a), with strong noncontingency operator as a sole primitive 
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modality. This logic is not normal, since it does not have the validity to the effect 
that modality is closed under material implication. We compared the relative 
expressive powers of modal logic, and noncontingency logic. We demon¬ 

strated that in >C(a), some of the five basic frame properties are undefinable but 
some is indeed definable. We proposed suitable notions of bisimulation and of 
bisimulation contraction for C{k). Based on this bisimulation, we characterized 
£(a) as the invariant fragment of standard modal logic and of first-order logic. 
Last but not least, we presented Hilbert-style axiomatizations for £(a) over 
various frame classes, where the minimal system is simpler than that proposed 
in [10]. 

For further research we leave the question whether -|- A5' is strongly 
complete with respect to the class of Euclidean frames. As we have observed, 
the soundness of -|- A5' follows from the soundness of and Proposition 59. 
Another direction is characterize C{A) within £(a), since >C(A) is less expressive 
than £(a) on non-reflexive models (see Proposition 13). A work related to this 
is to compare the notion of bisimulations of >C(a) and of £(A). From the proof 
of Proposition 13, we can check that {M,s) i±A (A/", t) but {M,s) (A/", t), 

thus tiA is not stronger than Ha- But how about the other way around? 
And also, one can consider logics in which the combinations of some modalities 
involved here are contained, such as the combination of A and A, and that of o 
and A. 

Last but not least, we can compare the relative expressivity of A(a) and 
£(o). In Section 3, we compare the relative expressive powers of A(a) and £(□), 
and that of A(a) and A(A), but we did not compare the relative expressivity 
of A(a) and C{o). For this, we observe that, since N Aip ^ otp A o-k^, there 
is a truth-preserving translation from £(a) to A(o), thus £(o) is at least as 
expressive as A(A). But we do not know whether C{o) is more expressive than 
£(a). Although one can show that £(o) shares the same notion of bisimulation 
as A(a) (e.g., Definition 24 and Propositions 28, 29 also apply to >C(o), see [3]), 
which means the two languages have the same distinguishing power, this does 
not mean they are equally expressive, because even two languages that have the 
same distinguishing power does not necessarily have the same expressive power. 
For example, the full language of propositional logic has the same distinguishing 
power as its fragment which has only propositional variables, but they are not 
equally expressive. We conjecture that C{o) is more expressive than A(a), since 
it seems to us that even the simplest £(o)-formula op cannot be expressed with 
£(a). We leave this for future work. 
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